Infrastructure Audit: Pricing Page Claims vs Implementation¶
Audit Date: February 4, 2026
Audited Document: /docs/PRICING_PAGE_COPY_GTM_POSITIONING.md
Codebase: /home/user/vell-main
Executive Summary¶
| Category | Claims | Verified | Gaps | Score |
|---|---|---|---|---|
| AI/Content Generation | 9 | 9 | 0 | 100% |
| CRM Integrations | 12 | 5 | 7 | 42% |
| Slack Integration | 6 | 5 | 1 | 83% |
| GTM Campaign Features | 7 | 6 | 1 | 86% |
| Enterprise Features | 7 | 6 | 1 | 86% |
| API Infrastructure | 5 | 1 | 4 | 20% |
| Security Features | 9 | 3 | 6 | 33% |
| Billing/Metering | 12 | 10 | 2 | 83% |
Overall: 45 of 67 claims verified (67%)
Critical Gaps (Must Fix Before GTM)¶
| Gap | Claimed | Reality | Impact |
|---|---|---|---|
| Salesforce Integration | Full (Command tier) | NOT IMPLEMENTED | Enterprise deal-breaker |
| API Controllers | REST API for Accelerate/Command | Routes exist, controllers missing | 404 errors on API calls |
| SOC 2 Type II | All tiers | No compliance evidence | Trust/security issue |
| IP Allowlisting | Command tier | NOT IMPLEMENTED | Enterprise requirement |
| Sentiment Analysis | Slack insights | Database schema only, no logic | Feature not functional |
| Rate Limit Tiers | 100/1000 req/min | No tier differentiation | All users same limits |
Detailed Findings¶
1. AI/Content Generation - FULLY VERIFIED (100%)¶
| Feature | Status | Key Files |
|---|---|---|
| AWS Bedrock (Claude, Nova, Titan) | ✅ Verified | app/Enums/BedrockEngine.php, app/Services/Bedrock/BedrockRuntimeService.php |
| OpenAI (GPT-4o, GPT-4 Turbo) | ✅ Verified (BYO API) | app/Domains/Entity/Enums/EntityEnum.php |
| Anthropic Direct | ✅ Verified | app/Domains/Engine/Drivers/AnthropicEngineDriver.php |
| Google Gemini (Pro, Flash) | ✅ Verified | Multiple Gemini drivers |
| DeepSeek (Chat, Reasoner) | ✅ Verified | app/Domains/Engine/Drivers/DeepSeekAIEngineDriver.php |
| Brand Voice | ✅ Verified | app/Extensions/ContentManager/System/Services/AgentCore/BrandVoiceContextBuilder.php |
| AgentCore Orchestration | ✅ Verified | app/Extensions/ContentManager/System/Services/AgentCore/AgentOrchestrator.php (30+ capabilities) |
| Listing SEO Optimization | ✅ Verified | app/Extensions/ContentManager/System/Services/Capabilities/MarketplaceListingSEOCapability.php |
| AI Content Generation | ✅ Verified | app/Extensions/ContentManager/System/Services/Capabilities/GenerateTextCapability.php |
Notes:
- All primary AI capabilities are production-ready
- Model versions in code are newer than documented (Claude 4.5, not 3.x)
- Non-Bedrock providers (OpenAI, Gemini, DeepSeek) available but can be restricted via bedrock_only_mode
2. CRM Integrations - MAJOR GAPS (42%)¶
HubSpot (Implemented)¶
| Feature | Tier Claimed | Status | Key Files |
|---|---|---|---|
| Contact Sync | All | ✅ Verified | app/Jobs/SyncContactSubmissionToHubSpotJob.php |
| Deal Sync | Accelerate+ | ✅ Verified | app/Extensions/Hubspot/System/Services/HubspotService.php |
| Custom Properties | Command | ✅ Verified | app/Extensions/ContentManager/System/Services/ContentAttributionHubSpotService.php |
| Bidirectional Sync | Command | ⚠️ ONE-WAY ONLY | Only App → HubSpot direction implemented |
| Workflow Triggers | Command | ⚠️ PARTIAL | HubSpot Sequences (enrollment-based), not native workflow triggers |
Salesforce (NOT IMPLEMENTED)¶
| Feature | Tier Claimed | Status | Evidence |
|---|---|---|---|
| Lead ID Mapping | Accelerate+ | ❌ NOT IMPLEMENTED | Database schema only, no service |
| Opportunity ID Mapping | Accelerate+ | ❌ NOT IMPLEMENTED | Database schema only |
| Deal Influence Tracking | Accelerate+ | ❌ NOT IMPLEMENTED | HubSpot only |
| Custom Field Mapping | Command | ❌ NOT IMPLEMENTED | Database schema only |
| Automated Bidirectional Sync | Command | ❌ NOT IMPLEMENTED | No SalesforceService exists |
| Multi-Touch Attribution | Command | ❌ NOT IMPLEMENTED | HubSpot only |
| Salesforce Flow Triggers | Command | ❌ NOT IMPLEMENTED | No integration |
Files That Need Creation:
- app/Extensions/Salesforce/System/Services/SalesforceService.php
- app/Extensions/Salesforce/System/Services/SalesforceAttributionService.php
- app/Jobs/SyncContactToSalesforceJob.php
- app/Jobs/SyncOpportunityToSalesforceJob.php
3. Slack Integration - MOSTLY VERIFIED (83%)¶
| Feature | Tier | Status | Key Files |
|---|---|---|---|
| Knowledge Base sync | Accelerate | ✅ Verified | app/Jobs/SyncSlackToKnowledgeBaseJob.php |
| OAuth 2.0 connection | Command | ✅ Verified | app/Extensions/Slack/System/Services/SlackService.php |
| Channel/thread/file extraction | Command | ✅ Verified | app/Extensions/Slack/System/Services/SlackContentExtractor.php |
| Reaction-based filtering | Command | ✅ Verified | app/Models/Slack/SlackChannel.php (lines 172-188) |
| Sentiment analysis | Command | ❌ NOT IMPLEMENTED | Schema exists, no analysis logic |
| AI-powered insights | Command | ✅ Verified | app/Extensions/Slack/System/Services/SlackInsightsService.php |
OAuth Scopes Verified (all 10):
- channels:history, channels:read, groups:history, groups:read
- im:history, mpim:history, files:read, reactions:read
- team:read, users:read
Issues:
- Sentiment analysis claimed but not implemented (database field sentiment_analysis exists but never populated)
- No tier-based feature restrictions enforced in code
4. GTM Campaign Features - VERIFIED (86%)¶
| Feature | Status | Key Files |
|---|---|---|
| GTM Campaign Studio | ✅ Verified | app/Extensions/SocialMedia/System/Http/Controllers/SocialMediaCampaignController.php |
| Auto-publish LinkedIn | ✅ Verified | app/Extensions/SocialMedia/System/Helpers/Linkedin.php |
| Auto-publish X (Twitter) | ✅ Verified | app/Extensions/SocialMedia/System/Helpers/X.php |
| Competitive Intelligence | ⚠️ PARTIAL | Templates only (CompetitorBattlecardTemplate.php), no live dashboard |
| Co-sell Playbooks | ✅ Verified | app/Extensions/AiPresentation/System/Templates/CoSellBriefTemplate.php |
| Content Attribution | ✅ Verified | app/Extensions/ContentManager/System/Models/ContentAttributionEvent.php (5 models) |
| Demo & Private Offer CTAs | ✅ Verified | routes/extroutes/demo.php, routes/extroutes/private-offer.php |
5. Enterprise Features - MOSTLY VERIFIED (86%)¶
| Feature | Status | Key Files |
|---|---|---|
| Partner Discovery & ICP Scoring | ✅ Verified | app/Extensions/ContentManager/System/Services/Capabilities/CoSellMatchingCapability.php |
| AWS CleanRooms | ⚠️ SIMULATION ONLY | AWSCleanRoomsCapability.php (line 247: "PRODUCTION TODO") |
| Multi-listing Management | ✅ Verified | app/CustomExtensions/CloudMarketplace/System/Http/Controllers/ListingController.php |
| Agreement Intelligence | ✅ Verified | app/CustomExtensions/CloudMarketplace/System/Services/AWS/AgreementService.php |
| Rich Media Studio | ✅ Verified | Multiple video services (Creatify, Topview, NovaReel) |
| ACE Automation | ✅ Verified | app/Extensions/ContentManager/System/Services/Capabilities/AceOpportunitySyncCapability.php |
| CPPO Templates | ✅ Verified | app/Extensions/ContentManager/System/Services/Capabilities/CppoProposalGeneratorCapability.php |
6. API Infrastructure - CRITICAL GAPS (20%)¶
| Feature | Tier | Status | Evidence |
|---|---|---|---|
| REST API Access | Accelerate/Command | ❌ Routes exist, controllers MISSING | routes/api_v1.php defines routes, controllers don't exist |
| API Key Limits (1/unlimited) | Accelerate/Command | ❌ NOT ENFORCED | No validation logic |
| Webhook System | Accelerate/Command | ❌ Controller NOT IMPLEMENTED | WebhookController referenced but missing |
| Rate Limits (100/1000 req/min) | Accelerate/Command | ❌ NO tier differentiation | All users share same limits |
| OAuth Client Apps | Command | ❌ NOT IMPLEMENTED | Only integration OAuth, not programmatic |
Missing Controllers:
- app/Http/Controllers/Api/V1/PartnerController.php
- app/Http/Controllers/Api/V1/PartnerListingController.php
- app/Http/Controllers/Api/V1/CoSellController.php
- app/Http/Controllers/Api/V1/WebhookController.php
7. Security Features - SIGNIFICANT GAPS (33%)¶
| Feature | Tier | Status | Evidence |
|---|---|---|---|
| TLS 1.3 Encryption | All | ❓ UNVERIFIED | Likely at AWS ALB/CloudFront level |
| SOC 2 Type II | All | ❌ NOT IMPLEMENTED | Security audit found 47 issues |
| Data Retention (90d/1yr/unlimited) | Tiered | ❌ NOT ENFORCED | No tier-based retention policies |
| Export Manual | Starter | ✅ Verified | AttributionExportService.php |
| Export Scheduled | Accelerate | ⚠️ PARTIAL | Framework exists, not wired to exports |
| Export API + Bulk | Command | ✅ Verified | DataExportRequest model |
| Audit Logs (30d/1yr) | Accelerate/Command | ⚠️ LIMITED | Content tagging only, not system-wide |
| IP Allowlisting | Command | ❌ NOT IMPLEMENTED | No IP filtering code |
| Custom DPA | Command | ❌ NOT IMPLEMENTED | No DPA system |
| Dedicated Infrastructure | Command | ❌ NOT IMPLEMENTED | Standard multi-tenant only |
| SSO/SAML | Command | ✅ Verified | app/CustomExtensions/CloudMarketplace/System/Services/AWS/CognitoService.php |
Security Audit Report (SECURITY_AUDIT_REPORT.md) found:
- 8 CRITICAL issues (CORS wildcards, CSRF exemptions, missing auth)
- 14 HIGH issues (mass assignment, rate limiting gaps)
- 18 MEDIUM issues
- 7 LOW issues
8. Billing/Metering - MOSTLY VERIFIED (83%)¶
| Feature | Status | Evidence |
|---|---|---|
| GTM Starter $179/mo, $1,499/yr | ✅ Verified | PRICING_PAGE_COPY_GTM_POSITIONING.md, migrations |
| GTM Accelerate $349/mo, $2,999/yr | ✅ Verified | Same |
| GTM Command $899/mo, $7,999/yr | ✅ Verified | Same |
| Token Packs ($29/$99/$249) | ✅ Verified | Documentation confirmed |
| Words metering | ✅ Verified | MarketplaceUsageTracker.php, seeded pricing |
| Images metering | ✅ Verified | Same |
| AudioMinutes metering | ✅ Verified | Same |
| VideoMinutes metering | ✅ Verified | Same |
| SEOCredits metering | ✅ Verified | Same |
| AWS Marketplace integration | ✅ Verified | Entitlements, metering tables |
| Credit multipliers (OpenAI 1.5x, DeepSeek 0.5x) | ❌ NOT FOUND | No multiplier logic in codebase |
| Presentations dimension | ⚠️ PARTIAL | Defined but not priced |
Priority Recommendations¶
P0 - CRITICAL (Block GTM launch)¶
- Implement Salesforce Integration - All 7 claimed features missing
- Create
SalesforceService.php,SalesforceAttributionService.php - Implement sync jobs for leads/opportunities
-
OR: Remove/clarify Salesforce claims in pricing
-
Implement API Controllers - Routes return 404
- Create
PartnerListingController.php - Create
CoSellController.php - Create
WebhookController.php -
Add tier-based permission middleware
-
Address Security Audit Issues - 8 CRITICAL
- Fix CORS wildcards
- Fix CSRF exemptions
- Add missing authorization checks
- Remove SOC 2 claim until remediated
P1 - HIGH (Feature parity)¶
- Implement Slack Sentiment Analysis - Integrate AWS Comprehend or similar
- Implement Rate Limit Tiers - Configure 100 vs 1000 req/min per plan
- Implement IP Allowlisting - Command tier enterprise requirement
- Complete AWS CleanRooms - Replace simulation with real SDK call
P2 - MEDIUM (Compliance/Enterprise)¶
- Implement Data Retention Policies - 90d/1yr/unlimited enforcement
- Add Tier-Based Feature Enforcement - Slack, API features by tier
- Implement Credit Multipliers - OpenAI 1.5x, DeepSeek 0.5x logic
What You Can Confidently Claim¶
Fully Supported¶
- AI-powered content generation (all listed engines)
- AWS Bedrock integration with guardrails
- Brand Voice and AgentCore orchestration (30+ capabilities)
- Listing SEO optimization with DataForSEO
- HubSpot integration (contacts, deals, custom properties)
- Slack KB sync and full OAuth (except sentiment)
- Social publishing (LinkedIn, X with full OAuth)
- Content attribution (5 models: first_touch, last_touch, linear, time_decay, position_based)
- Agreement Intelligence with renewal tracking
- Video generation (multiple engines)
- ACE opportunity automation
- CPPO proposal generation
- All pricing tiers and token packs
- AWS Marketplace metering and entitlements
- SSO/SAML via AWS Cognito
Needs Clarification in Pricing¶
- Salesforce: Mark as "Coming Soon" or remove
- Competitive Intelligence: "AI-generated battlecards" not "live dashboard"
- API access: Remove or specify implementation timeline
- SOC 2: Remove until compliant
- Bidirectional CRM sync: Clarify as one-way for HubSpot
Files Referenced¶
Key Implementation Files¶
app/Services/Bedrock/BedrockRuntimeService.phpapp/Extensions/ContentManager/System/Services/AgentCore/AgentOrchestrator.phpapp/Extensions/Hubspot/System/Services/HubspotService.phpapp/Extensions/Slack/System/Services/SlackService.phpapp/Extensions/SocialMedia/System/Helpers/Linkedin.phpapp/Extensions/SocialMedia/System/Helpers/X.phpapp/Extensions/ContentManager/System/Services/Capabilities/CoSellMatchingCapability.phpapp/CustomExtensions/CloudMarketplace/System/Services/AWS/AgreementService.phpapp/Services/PaymentGateways/StripeService.php
Documentation¶
docs/PRICING_PAGE_COPY_GTM_POSITIONING.md(audited document)docs/HUBSPOT_GAP_ANALYSIS_AND_EXPANSION.mddocs/PARTNER_API_CAPABILITIES.mdSECURITY_AUDIT_REPORT.md
Audit performed by Claude Code on February 4, 2026